Lead App Sec Engineer — DevSecOps & Threat Modeling

Visa Hunt; Singapore; On-site; SGD 140,000 - 190,000; Full time

Job summary

Thoughtworks in Singapore seeks a Lead Security Engineer to align enterprise risk with modern software delivery. You’ll guide teams to embed security in the SDLC, platform architecture, and cloud environments while mentoring engineers and driving secure practices across accounts.

You’ll balance strategic risk leadership with hands-on security engineering, conducting threat modeling and coordinating with cross-functional teams to deliver trustworthy software solutions.

Qualifications

• 7+ years in information security engineering, application security, or cloud security.
• Deep security architecture exposure with secure SDLC and threat modeling.
• Hands-on with security automation tools and CI/CD integration.
• Cloud security, container security, and IaC governance expertise.
• Strong communication, stakeholder management, and leadership abilities.

Responsibilities

• Design and implement enterprise security architectures and zero-trust patterns.
• Advise clients and engineering leads, aligning security with business goals.
• Champion shift-left by embedding SAST/DAST/IAST and secrets management in CI/CD.
• Conduct threat modeling, risk assessments, and architecture reviews.
• Govern cloud security, IAM, container security, and IaC compliance across clouds.
• Lead vulnerability management, incident response, and audit readiness.
• Mentor engineers, foster inclusive culture, and guide security practice communities.

Skills

InfoSec strategy

Threat modeling

DevSecOps

Cloud security (AWS/Azure/GCP)

Kubernetes & Docker security

IaC security

IAM & zero-trust

Regulatory compliance

Mentoring/leadership

Security automation tools (SAST/DAST/S

Tools

SAST

DAST

IAST

SCA

Secrets scanners

CI/CD integration

Terraform/CloudFormation

Job description

Thoughtworks in Singapore seeks a Lead Security Engineer to align enterprise risk with modern software delivery. You’ll guide teams to embed security in the SDLC, platform architecture, and cloud environments while mentoring engineers and driving secure practices across accounts.

You’ll balance strategic risk leadership with hands-on security engineering, conducting threat modeling and coordinating with cross-functional teams to deliver trustworthy software solutions.